Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: SG2L6qj/Oci8KQokXWyhhnbqz2w3le8gtkNn7eCnlYY=
Subject key identifier: 10:07:30:BF:C8:4C:08:C2:AD:05:E6:94:F2:6C:E6:49:F2:9C:6B:E4
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019A2C31E4DA49DFFE3EFD1C13BA815E9325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 121A
Signing time: Tue 28 Oct 2025 19:00:58 +0000
Manifest this update: Tue 28 Oct 2025 19:00:58 +0000
Manifest next update: Wed 29 Oct 2025 19:00:58 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 83iiFBKJLJ100BSEw+m2q7D4ML674md/YRmjrXogIqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:e4:da:49:df:fe:3e:fd:1c:13:ba:81:5e:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Oct 28 19:00:58 2025 GMT
Not After : Oct 29 19:00:58 2025 GMT
Subject: CN=100730bfc84c08c2ad05e694f26ce649f29c6be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:f5:35:73:84:ab:2f:43:51:12:0c:40:04:
2e:d6:e6:9f:b2:dc:dd:bc:6f:ff:8f:6c:21:e3:63:
c1:50:82:4f:5f:ec:2b:66:9e:30:b0:2e:ff:6b:7d:
b2:6b:ba:1a:1e:4a:e7:a5:57:d1:bb:5f:32:af:0c:
ce:23:98:d0:f8:6c:65:49:f3:30:69:d2:00:86:59:
1f:93:62:a8:dd:27:1a:87:35:d1:3b:d4:5b:4e:8c:
7b:f3:8a:8c:b3:2e:80:58:fe:8b:63:cf:85:11:23:
61:0f:c0:2b:e6:37:31:e4:8d:71:49:7e:c5:82:b0:
69:22:a1:ab:02:20:cf:d3:23:9a:6e:2f:43:b9:f3:
2e:01:ca:78:40:a0:86:b4:0e:93:12:a7:4c:a1:a0:
d5:d0:f4:68:d7:f2:d5:54:67:5b:55:fc:60:c9:e6:
ab:df:9d:31:c6:88:12:00:12:27:2f:15:06:b0:dc:
3d:df:b9:4d:05:08:e0:9c:1c:86:3f:71:0f:06:4c:
66:a3:e1:c8:a6:d4:4c:1b:b7:81:d7:b5:84:db:a1:
13:95:e9:f4:f5:d0:07:2e:51:f4:ce:7c:42:c9:21:
25:4e:cb:93:e2:f8:79:94:e8:6b:c5:a7:6e:c6:01:
7a:40:9a:1d:60:a0:4f:11:89:c2:ba:52:24:2f:ce:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:30:BF:C8:4C:08:C2:AD:05:E6:94:F2:6C:E6:49:F2:9C:6B:E4
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ba:c1:ab:62:0b:77:bb:10:c7:ec:9d:3a:88:dd:2e:be:2b:
f0:6d:05:29:c7:58:27:30:93:14:12:7e:87:92:8a:91:b9:4c:
f1:60:5e:ec:57:cf:8b:b0:72:f5:89:ba:07:67:e4:aa:af:f8:
ab:f9:a6:03:5b:72:4f:98:f4:9d:50:c2:ff:de:a1:60:0f:ae:
02:17:e4:23:a0:ac:d8:98:dd:ed:d6:d5:bd:fd:09:c3:6d:8d:
6e:d9:4d:9d:b7:6f:0e:1b:57:98:ff:57:f3:3e:4a:cf:28:c6:
b4:fe:be:80:d0:17:59:e2:28:2f:01:59:99:0a:c7:b5:e9:e3:
84:c8:1f:3d:16:36:62:a1:90:83:f0:a6:ef:2a:28:30:db:12:
eb:80:ff:d4:be:7a:48:5e:4d:5b:e2:9f:a0:54:3b:52:c2:76:
c3:63:8d:44:93:f3:89:e0:94:76:70:03:f2:dc:15:33:44:0c:
2b:14:cf:ea:db:49:1c:ad:9a:94:b4:e5:4c:89:50:96:3c:c5:
44:d2:48:3a:5f:d6:10:35:1e:38:78:e3:b9:26:8c:89:bb:2b:
7d:06:b0:c9:8a:a1:6b:c9:87:71:30:58:10:6b:aa:be:cc:8f:
76:57:cf:1d:71:55:17:97:3a:c4:25:42:cd:d2:99:63:a7:8d:
1a:47:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:19:22 2025 by rpki-client